MEDIUM 6.5 NVD
CVE-2026-78851
Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the med
Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method.
References
- https://github.com/SLO-CYBER-SEC/CVE-2026-78851
- https://github.com/getgrav/grav
- https://github.com/getgrav/grav/blob/2.0.6/system/config/security.yaml#L325
- https://github.com/getgrav/grav/blob/2.0.6/system/src/Grav/Common/Twig/Extension/GravExten
- https://github.com/SLO-CYBER-SEC/CVE-2026-78851
This medium severity vulnerability with a CVSS score of 6.5 was published on 2026-10-15 via NVD.
vulnfeed aggregates 14677 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.